Encryption strength for proxied SSH sessions
The level of SSH encryption can be set for SSH sessions on a per-profile basis.
RPC over HTTP
| Encryption Level | Description |
| compatible | This level allows for a broader set of encryption algorithms to be used and is better for compatibility. |
| highencryption | This level will only allow AES-CTR, AES-GCM and high encryption algorithms to be used for the session. |
Syntax:
config firewall ssl-ssh-profile edit <profile name> config ssh set ssh-algorithm {compatible|high-encryption} end
end
Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!